InfoBytes
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
FTC Obtains Settlement from Cord Blood Bank in Data Theft Action
On February 5, a federal district court in California approved a settlement recently obtained by the FTC, which (i) requires a California-based firm that operates a cord blood bank to establish a comprehensive information security program and submit to security audits by independent auditors every other year for 20 years, and (ii) prohibits the company from misrepresenting its privacy and security practices. The FTC alleged that the firm violated the FTC Act by failing to use reasonable and appropriate procedures for handling customers’ personal information, despite its privacy policy claims to the contrary. Further, the FTC charged that the firm created unnecessary risks to personal information by transporting portable data storage devices containing personal information in a way that made the information vulnerable to theft, and failed to prevent, detect, and investigate unauthorized access to computer networks. According to the FTC, this resulted in a December 2010 breach in which certain portable devices were stolen from an employee’s personal vehicle and the names, gender, Social Security numbers, dates and times of birth, drivers’ license numbers, credit and debit card numbers, and other personal information of nearly 300,000 customers were compromised. The FTC also alleged that certain of the portable devices could have permitted an intruder to access the firm’s network, which contained sensitive personal health information.
Third Circuit Holds Notice Sufficient to Preserve Borrower's Three-Year TILA Rescission Right
On February 5, the U.S. Court of Appeals for the Third Circuit held that a borrower need only provide written notice of intent to rescind a loan within the statutory three-year rescission period to preserve that right; a borrower need not also file a complaint within the three-year period. Sherzer v. Homestar Mortg. Servs., No. 11-4254, 2013 WL 425835 (3rd Cir. Feb. 5, 2013). TILA allows borrowers three years to rescind a loan if the lender fails to provide certain required disclosures. In this case, counsel to the borrowers—who had obtained two mortgage loans from two different lenders—sent a letter to the lenders within three years of the closing date asserting that the lenders materially violated TILA by failing to provide certain disclosures. The letter also notified the lenders that the borrowers were exercising their right to rescind the loans. When the lenders refused to rescind one of the loans, the borrowers filed suit more than three years after closing. On appeal, the court reversed the district court, which had dismissed the borrowers’ rescission claims as untimely. The Third Circuit instead held that (i) nothing in the language of the statute (or its implementing regulation) requires the filing of a court action to invoke the right to rescind, and (ii) valid written notice of rescission within the three-year period is sufficient. The court acknowledged concerns about the practical impacts of such a holding on lenders, but stated it was constrained by the statute’s text. In so holding, the Third Circuit agreed with the position advocated by the CFPB and already adopted by the Fourth Circuit, but split from the Ninth and Tenth Circuits, which have held that a borrower must file a complaint within the three-year period to properly exercise the rescission right. The same issue remains pending in the Eighth Circuit.
UK's HM Treasury Unveils Bank Break-Up Legislation, Expects Passage Next Year
On February 4, Britain’s HM Treasury introduced legislation—entitled the Banking Reform Bill—that would provide regulators with new authority to break up a bank if its investment activities put deposits at risk. The legislation goes a step beyond previously proposed policies that would merely require banks to separate retail banking from investment banking. Under the proposed legislation, in addition to requiring that institutions ring-fence deposits, the Bank of England could force an institution to sell off certain businesses if it determines that the institution has failed to protect retail banking activities from high-risk investments. The bill also would, among other things, provide depositors preference if a bank becomes insolvent, and set new leverage caps. The introduction of the bill is the first step in the legislative process, which Britain’s Chancellor of the Exchequer stated he expects to be finalized next year.
Republican Senators Reiterate Opposition to CFPB Nomination, Demand Structural Reforms
On February 1, Republican Senators sent a letter to President Obama to reaffirm their position that the CFPB lacks transparency and accountability, and that until structural reforms are implemented, the 43 signatories will continue to block consideration of any nominee for CFPB director. Specifically, the letter states that (i) the CFPB director-led structure should be replaced by a bipartisan board of directors, (ii) the CFPB should be subject to the annual congressional appropriations process, and (iii) prudential regulators should be empowered to serve as a safety and soundness check to CFPB actions. Also on February 1, Senator Rob Portman (R-OH), who opted not to sign the letter to President Obama, sent a separate letter to CFPB Director Cordray to highlight the “commonsense reforms” to the CFPB that the two previously have discussed, including a change in the CFPB’s governance structure. The letter states that Mr. Cordray “noted…leadership by a bipartisan board provides some stability and continuity in regulation over time.” On February 7, Senator Portman reportedly is aiming to serve as a liaison between the White House and congressional Republicans on Mr. Cordray’s pending nomination and potential CFPB reforms. The only other Republican Senator not to sign the letter to President Obama was Senator Bob Corker (R-TN).
State Law Update: Virginia Amends Broker Licensing Rule
Recently, the Virginia State Corporation Commission adopted regulations proposed by the Bureau of Financial Institutions to clarify that individuals engaged in the business of a loan processor or underwriter, who do not otherwise engage in mortgage broker activities, are not mortgage brokers subject to state licensing requirements. The final rule also (i) broadens the scope of prohibited activities for licensees, (ii) establishes requirements for licensees’ outsourcing of loan processing and underwriting, (iii) requires licensees to update its NMLS loan originator sponsorship information following changes in originator status, (iv) adds a definition for “refinancing” that includes any loan modification, and (v) expands the Bureau’s enforcement authorities. The amended regulations took effect January 28, 2013.
Virginia Federal Court Applies Continuing Violation Theory to Extend FHA Statute of Limitations
On January 29, the U.S. District Court for the Western District of Virginia invoked the continuing violation theory in refusing to bar an otherwise untimely Fair Housing Act discrimination claim. Nat’l Fair Hous. Alliance, Inc. v. HHHunt Corp., No. 11-131, 2013 WL 335877 (W.D. Va. Jan. 29, 2013). The case against the defendant architect centered on the design and construction of two apartment complexes in North Carolina. The parties agreed that the FHA’s two year statute of limitations had not run on claims relating to one of the projects. Standing alone, the claims relating to the other apartment complex were outside the two year limitation. The plaintiffs argued, however, that the two allegedly wrongful designs together established a pattern or practice of discriminatory acts, the last of which having occurred within the statutory time frame, served to save all claims from the time limitation. The court found this theory viable and denied the defendant’s motion for summary judgment. In doing so the court held that multiple design and construction projects that are “sufficiently related” can constitute a pattern or practice that warrants extending the statute of limitations period. Whether the two apartment construction projects at issue were so related, the court reasoned, raised a genuine issue of material fact that prevented summary judgment.
NACHA Finalizes Guidelines for Use of Quick Response Codes for Consumer Bill Pay
Recently, NACHA – The Electronic Payments Association’s Council for Electronic Billing and Payment, released final guidelines to facilitate the use of Quick Response (QR) codes for a variety of consumer bill payment functions, including viewing bills, making payments, enrolling for eBills, and setting up payees in online banking. The guidelines provide voluntary standards for using QR codes in both biller direct and consolidator/aggregator billing and payment models, and provides recommends for (i) QR code size, (ii) data to be included in the QR code, and (iii) layout of the data represented in the QR code. The guidelines are intended to establish a single QR code format that can be printed on a paper bill and scanned by a consumer’s mobile phone using a biller, mobile banking, or generic QR code reader to allow billers and service providers to enable QR encoding in a standardized format, provide certainty for biller and banking clients, and ensure a consistent consumer experience.
Fannie Mae Updates Servicer Selection Form and Process, Publishes First Issue of New Quarterly Compliance Newsletter
On February 1, Fannie Mae issued a Servicing Notice requiring servicers to submit a Servicer Selection Form (Form 200) to Fannie Mae for each law firm the servicer will retain for default-related services. If a law firm practices in multiple jurisdictions, Fannie Mae requires a servicer to submit a Servicer Selection Form for each jurisdiction in which the servicer intends to retain the firm. The notice also provides a link to a step-by-step guide for completing and submitting Form 200.
On February 5, Fannie Mae published the first issue of The Quarterly Compass, a new newsletter providing projected timelines on upcoming key Fannie Mae initiatives and changes that may impact lenders’ and vendors’ operations, systems, and processes. The first issue includes, among other things, (i) a Quarterly Initiatives Timeline, (ii) a ULDD Phase 2 update, and (iii) information about loan delivery updates.
California Supreme Court Holds Online Download Purchase Transactions Not Covered By Song-Beverly Credit Card Act
On February 4, the California Supreme Court held, in a 4-3 split ruling, that the personal privacy protections afforded consumers by the Song-Beverly Credit Card Act do not apply when the item purchased is downloaded via the Internet. Apple Inc. v. Sup. Ct. Los Angeles Cty., No. S199384, 2013 WL 406586 (Cal. Feb. 4, 2013). However, the court did not consider whether the Song-Beverly Act privacy provisions apply to the broader category of online transactions that do not involve a downloadable product. In this case, a customer filed a putative class action against an online digital media retailer, alleging that the retailer’s practice of requiring customers to provide their telephone number and address before accepting credit card payment for downloadable media purchases violates Section 1747.08 of the Song-Beverly Act, which prohibits retailers from requiring personal information as a condition to completing credit card transactions. Citing the statutory language and legislative history, the court explained that while Song-Beverly was intended to protect personal privacy, it was not meant to do so at the risk of increasing fraud. Further, the court determined that fraud protections provided in Song-Beverly, which allow retailers to request proof of identification, are not available to online retailers selling downloadable products. The court also reasoned that in later enacting the California Online Privacy Protection Act, the state legislature demonstrated that it can unambiguously address online transactions, and that it sought to strike a different balance between privacy protections and online commerce than did the Song-Beverly Act. Therefore, the court held, online transactions involving downloadable products fall outside the scope of Song-Beverly. The court invited the legislature to revisit consumer privacy in connection with online transactions.
Special Alert: Detailed Analysis of CFPB's Mortgage Servicing Rules
On January 17, the CFPB issued final rules amending Regulation Z (TILA) and Regulation X (RESPA) to implement certain mortgage servicing standards set forth by the Dodd-Frank Act and to address other issues identified by the CFPB. The rule amending Regulation Z includes changes to (i) periodic billing statement requirements, (ii) notices about adjustable rate mortgage interest rate adjustments, and (iii) rules on payment crediting and payoff statements. The rule amending Regulation X addresses (i) force-placed insurance requirements, (ii) error resolution and information request procedures, (iii) information management policies and procedures, (iv) standards for early intervention with delinquent borrowers, (v) rules for contact with delinquent borrowers, and (vi) enhanced loss mitigation procedures. This Alert includes a detailed analysis of these nine topics and also provides links to each of the model forms amended or added by the rule. For ease of reference, this Alert contains a detailed, hyper-linked table of contents. Click here to download our detailed analysis of CFPB's Mortgage Servicing Rules.